Private and secure communication architecture without utilizing a public cloud based routing server

• US 9,781,087 B2
• Filed: 10/28/2014
• Issued: 10/03/2017
• Est. Priority Date: 09/09/2011
• Status: Active Grant

• Current Assignee: Kingston Digital, Inc. (Kingston Technology Corporation)
• Original Assignee: Kingston Digital, Inc. (Kingston Technology Corporation)
• Inventors: Chen, Ben Wei
• Primary Examiner(s): Rashid, Harunur
• Assistant Examiner(s): PHAM, QUY C
• Application Number:
  US14/526,393
• Publication Number:
  US 20150163213A1
• Time in Patent Office: 1,071 Days
• CPC Class Codes: H04L 45/60 Router architectures
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers

Abstract

A method for use with a public cloud network is disclosed. The method includes setting up a private cloud routing server and a smart device client in a client server relationship. The private cloud routing server includes a first message box. The smart client includes a second message box. The first and second message boxes are located on the public cloud network. The method also includes passing an authenticated session based message between the first and the second message boxes in a secure manner. The smart device client and the private cloud routing server can communicate with each other after authentication to provide security. The method also includes setting up another smart device client in a client server relationship with the private cloud routing server. The two smart device clients can privately and securely communicate with each other through the public cloud network.

Claims

1. A smart device client, comprising:

a memory storing a program that in response to being executed by a processor, enables the smart device client to establish a communication session as a host or guest by performing operations comprising;

locate a private cloud routing server program that enables the smart device client to;

retrieve a session based invitation from a smart device client message box,

send a session based access request to a private cloud routing server message box to register a public IP address and a private IP address of the smart device client, wherein the session based access request includes the public IP address and the private IP address of the smart device client,

retrieve a session based acknowledgement with a public IP address and a private IP address of a private cloud routing server from the smart device client message box,

send an access request to the private cloud routing server,

wherein the public and private IP address of the private cloud routing server and the public and private IP address of the smart device client are registered,

wherein an outgoing route remains open waiting for a response from the private cloud routing server, and

wherein an incoming public and private IP addresses of the private cloud routing server is bound with a registered outgoing private IP address of the smart device client;

receive an incoming request from the private cloud routing server,

establish a secure peer-to-peer communication with the private cloud routing server, and

access private network service through the private cloud routing server;

locate the private cloud routing server;

join a virtual local area network (LAN) under the private cloud routing server;

access the private cloud routing server behind a firewall with a fixed or dynamic IP address, wherein the smart device client;

requires no outside or public cloud based routing server in a wide area network (WAN),

requires no additional router setup in the virtual LAN, and

establishes a secure peer-to-peer communication with the private cloud routing server; and

conduct a private and secure chat with at least another smart device client through the private cloud routing server, comprising;

in response to starting a communication session as a host;

create and host a chat room session,

invite a chat guest,

scan for a recognizable guest, and

start a private and secure chat as the host;

in response to not starting a communication session as a host;

receive a chat invitation and join a chat session as a guest,

scan for a recognizable host,

authenticate via a log-in authentication,

join a chat room session, and

start a private and secure chat as the guest.

2. The smart device client of claim 1, wherein the program in response to being executed by the processor, further enables the smart device client to:

access the private cloud routing server;

access the private cloud routing server behind a firewall with a fixed or dynamic IP address, wherein the smart device client;

requires no outside or public cloud based routing server in a wide area network (WAN),

requires no additional router setup in the virtual LAN, and

establishes a secure peer-to-peer communication with the private cloud routing server; and

access a private network service through the private cloud routing server.

3. The smart device client of claim 1,

wherein the private and secure chat comprises any one of video, audio, text, or application communications, and

wherein the application is any one of a program, utility, operation, or remote desktop that is recognizable by both a host and guest.

4. A method, comprising:

locating a private cloud routing server program that enables the smart device client to;

retrieve a session based invitation from a smart device client message box,

send a session based access request to a private cloud routing server message box to register a public IP address and a private IP address of the smart device client, wherein the session based access request includes the public IP address and the private IP address of the smart device client,

retrieve a session based acknowledgement with a public IP address and a private IP address of a private cloud routing server from the smart device client message box, and

send an access request to the private cloud routing server,

wherein the public and private IP address of the private cloud routing server and the public and private IP address of the smart device client are registered,

wherein an outgoing route remains open waiting for a response from the private cloud routing server, and

wherein an incoming public and private IP addresses of the private cloud routing server is bound with a registered outgoing private IP address of the smart device client;

receive an incoming request from the private cloud routing server,

establish a secure peer-to-peer communication with the private cloud routing server, and

access private network service through the private cloud routing server;

locate the private cloud routing server;

join a virtual local area network (LAN) under the private cloud routing server;

access the private cloud routing server behind a firewall with a fixed or dynamic IP address, wherein the smart device client;

requires no outside or public cloud based routing server in a wide area network (WAN),

requires no additional router setup in the virtual LAN, and

establishes a secure peer-to-peer communication with the private cloud routing server; and

conduct a private and secure chat with at least another smart device client through the private cloud routing server, comprising;

in response to starting a communication session as a host;

create and host a chat room session,

invite a chat guest,

scan for a recognizable guest, and

start a private and secure chat as the host;

in response to not starting a communication session as a host;

receive a chat invitation and join a chat session as a guest,

scan for a recognizable host,

authenticate via a log-in authentication,

join a chat room session, and

start a private and secure chat as the guest.

5. A non-transitory computer-readable medium storing executable instructions that, in response to execution, cause a smart device client to perform operations comprising:

locating a private cloud routing server program that enables the smart device client to;

retrieve a session based invitation from a smart device client message box,

send a session based access request to a private cloud routing server message box to register a public IP address and a private IP address of the smart device client, wherein the session based access request includes the public IP address and the private IP address of the smart device client,

retrieve a session based acknowledgement with a public IP address and a private IP address of a private cloud routing server from the smart device client message box, and

send an access request to the private cloud routing server,

wherein the public and private IP address of the private cloud routing server and the public and private IP address of the smart device client are registered,

wherein an outgoing route remains open waiting for a response from the private cloud routing server, and

wherein an incoming public and private IP addresses of the private cloud routing server is bound with a registered outgoing private IP address of the smart device client;

receive an incoming request from the private cloud routing server,

establish a secure peer-to-peer communication with the private cloud routing server, and

access private network service through the private cloud routing server;

locate the private cloud routing server;

join a virtual local area network (LAN) under the private cloud routing server;

access the private cloud routing server behind a firewall with a fixed or dynamic IP address, wherein the smart device client;

requires no outside or public cloud based routing server in a wide area network (WAN),

requires no additional router setup in the virtual LAN, and

establishes a secure peer-to-peer communication with the private cloud routing server; and

conduct a private and secure chat with at least another smart device client through the private cloud routing server, comprising;

in response to starting a communication session as a host;

create and host a chat room session,

invite a chat guest,

scan for a recognizable guest, and

start a private and secure chat as the host;

in response to not starting a communication session as a host;

receive a chat invitation and join a chat session as a guest,

scan for a recognizable host,

authenticate via a log-in authentication,

join a chat room session, and

start a private and secure chat as the guest.